DNS problems?

In reference to www.bbc.co.uk/news/technology-26417441:

A world-spanning network of hijacked home routers has been uncovered by security researchers.

The network involves more than 300,000 routers in homes and small businesses that have been taken over through loopholes in their core software.
.
.
.
.
Once routers were taken over, internal instructions were changed so they no longer asked servers at their owner's ISP for help looking up the location of websites they regularly visit.

Link to report from researchers (pdf).

Standard network security procedures and policies should prevent most of that, if implemented.

I've just read about this in TechWorld newsletter :- http://news.techworld.com/networking/3505133/attack-...

I don't pretend to understand the details but remember that when I used Comodo Security there was a facility to block changes to DNS settings.

What is the best way to secure these settings?

In reply to a post by mikebear:

What is the best way to secure these settings?

Well, probably the best way is to run a dns caching server on your LAN that uses upstream DNS servers (i.e. your ISP's) rather than use the router as you LAN's DNS server - then if it does get compromised, as nothing uses it nothing much will go wrong.

Nick
PS I use http://dnsmasq.org/